* Carsten Boecker: > If I set winbind separator to "+" (wich is mentioned not to use in man smb.conf) > login with ssh works as expected and in auth.log is > there is > Invalid user Domain+user from ClientIP I think Debian's OpenSSH uses "/" as a separator for SELinux roles, so you can't use them in user names.